Dependency-Check Report

Dependency-Check is an open source tool performing a best effort analysis of 3rd party dependencies; false positives and false negatives may exist in the analysis performed by the tool. Use of the tool and the reporting provided constitutes acceptance for use in an AS IS condition, and there are NO warranties, implied or otherwise, with regard to the analysis or its use. Any use of the tool and the reporting provided is at the user’s risk. In no event shall the copyright holder or OWASP be held liable for any damages whatsoever arising out of or in connection with the use of this tool, the analysis performed, or the resulting report.

Scan Information (show all):

dependency-check version: 12.1.8
Report Generated On: Sat, 18 Oct 2025 19:14:10 GMT
Dependencies Scanned: 22 (18 unique)
Vulnerable Dependencies: 0
Vulnerabilities Found: 0
Vulnerabilities Suppressed: 0
...
NVD API Last Checked: 2025-10-18T19:11:44Z
NVD API Last Modified: 2025-10-18T16:15:35Z

Summary

Summary of Vulnerable Dependencies (click to show all)

Dependency	Vulnerability IDs	Package	Confidence	Evidence Count
accessors-smart-2.6.0.jar		pkg:maven/net.minidev/accessors-smart@2.6.0		43
angus-activation-2.0.3.jar	cpe:2.3:a:eclipse:jakarta_mail:2.0.3:::::::*	pkg:maven/org.eclipse.angus/angus-activation@2.0.3	Low	35
asm-9.7.1.jar		pkg:maven/org.ow2.asm/asm@9.7.1		54
commons-logging-1.3.5.jar		pkg:maven/commons-logging/commons-logging@1.3.5		129
error_prone_annotations-2.42.0.jar		pkg:maven/com.google.errorprone/error_prone_annotations@2.42.0		29
j2objc-annotations-3.1.jar		pkg:maven/com.google.j2objc/j2objc-annotations@3.1		33
jakarta.activation-api-2.1.4.jar		pkg:maven/jakarta.activation/jakarta.activation-api@2.1.4		45
json-path-2.9.0.jar	cpe:2.3:a:json-path:jayway_jsonpath:2.9.0:::::::*	pkg:maven/com.jayway.jsonpath/json-path@2.9.0	Highest	34
json-smart-2.6.0.jar	cpe:2.3:a:json-smart_project:json-smart:2.6.0:::::::* cpe:2.3:a:json-smart_project:json-smart-v2:2.6.0:::::::*	pkg:maven/net.minidev/json-smart@2.6.0	Highest	51
jsr305-3.0.2.jar		pkg:maven/com.google.code.findbugs/jsr305@3.0.2		17
micrometer-commons-1.14.12.jar		pkg:maven/io.micrometer/micrometer-commons@1.14.12		65
micrometer-observation-1.14.12.jar		pkg:maven/io.micrometer/micrometer-observation@1.14.12		65
slf4j-api-2.0.17.jar		pkg:maven/org.slf4j/slf4j-api@2.0.17		29
spotbugs-annotations-4.9.8.jar		pkg:maven/com.github.spotbugs/spotbugs-annotations@4.9.8		53
spring-core-6.2.12.jar	cpe:2.3:a:pivotal_software:spring_framework:6.2.12:::::::* cpe:2.3:a:springsource:spring_framework:6.2.12:::::::* cpe:2.3:a:vmware:spring_framework:6.2.12:::::::*	pkg:maven/org.springframework/spring-core@6.2.12	Highest	41
spring-hateoas-2.5.1.jar	cpe:2.3:a:vmware:spring_hateoas:2.5.1:::::::*	pkg:maven/org.springframework.hateoas/spring-hateoas@2.5.1	Highest	46
spring-plugin-core-3.0.0.jar		pkg:maven/org.springframework.plugin/spring-plugin-core@3.0.0		42
spring-web-6.2.12.jar	cpe:2.3:a:pivotal_software:spring_framework:6.2.12:::::::* cpe:2.3:a:springsource:spring_framework:6.2.12:::::::* cpe:2.3:a:vmware:spring_framework:6.2.12:::::::* cpe:2.3:a:web_project:web:6.2.12:::::::*	pkg:maven/org.springframework/spring-web@6.2.12	Highest	35

Dependencies (vulnerable)

accessors-smart-2.6.0.jar

Description:

Java reflect give poor performance on getter setter an constructor calls, accessors-smart use ASM to speed up those calls.

License:

The Apache Software License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt

File Path: /home/runner/.m2/repository/net/minidev/accessors-smart/2.6.0/accessors-smart-2.6.0.jar
MD5: 0ad72639eea293193f68898da9b0b902
SHA1: 2d96f1d9b6ab7f13261aa81b15703574185747a0
SHA256:222c9f547bb20a99fc486403a398352d1306fb671b38abd7ecab6401df170e61
Referenced In Project/Scope: psi-probe-rest:compile
pkg:maven/net.minidev/json-smart@2.6.0

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	accessors-smart	High
Vendor	jar	package name	asm	Highest
Vendor	jar	package name	minidev	Highest
Vendor	jar	package name	net	Highest
Vendor	Manifest	build-jdk-spec	17	Low
Vendor	Manifest	bundle-docurl	https://urielch.github.io/	Low
Vendor	Manifest	bundle-symbolicname	net.minidev.accessors-smart	Medium
Vendor	pom	artifactid	accessors-smart	Highest
Vendor	pom	artifactid	accessors-smart	Low
Vendor	pom	developer email	hezhangjian97gmail.com	Low
Vendor	pom	developer email	uchemouni@gmail.com	Low
Vendor	pom	developer id	hezhangjian	Medium
Vendor	pom	developer id	uriel	Medium
Vendor	pom	developer name	Uriel Chemouni	Medium
Vendor	pom	developer name	Zhangjian He	Medium
Vendor	pom	groupid	net.minidev	Highest
Vendor	pom	name	ASM based accessors helper used by json-smart	High
Vendor	pom	organization name	Chemouni Uriel	High
Vendor	pom	organization url	https://urielch.github.io/	Medium
Vendor	pom	url	https://urielch.github.io/	Highest
Product	file	name	accessors-smart	High
Product	jar	package name	asm	Highest
Product	jar	package name	minidev	Highest
Product	jar	package name	net	Highest
Product	Manifest	build-jdk-spec	17	Low
Product	Manifest	bundle-docurl	https://urielch.github.io/	Low
Product	Manifest	Bundle-Name	accessors-smart	Medium
Product	Manifest	bundle-symbolicname	net.minidev.accessors-smart	Medium
Product	pom	artifactid	accessors-smart	Highest
Product	pom	developer email	hezhangjian97gmail.com	Low
Product	pom	developer email	uchemouni@gmail.com	Low
Product	pom	developer id	hezhangjian	Low
Product	pom	developer id	uriel	Low
Product	pom	developer name	Uriel Chemouni	Low
Product	pom	developer name	Zhangjian He	Low
Product	pom	groupid	net.minidev	Highest
Product	pom	name	ASM based accessors helper used by json-smart	High
Product	pom	organization name	Chemouni Uriel	Low
Product	pom	organization url	https://urielch.github.io/	Low
Product	pom	url	https://urielch.github.io/	Medium
Version	file	version	2.6.0	High
Version	Manifest	Bundle-Version	2.6.0	High
Version	pom	version	2.6.0	Highest

Identifiers

pkg:maven/net.minidev/accessors-smart@2.6.0 (Confidence:High)

angus-activation-2.0.3.jar

Description:

 Implementation

License:

http://www.eclipse.org/org/documents/edl-v10.php

File Path: /home/runner/.m2/repository/org/eclipse/angus/angus-activation/2.0.3/angus-activation-2.0.3.jar
MD5: ad20392145690b36b4f950fe31a31a2a
SHA1: 7f80607ea5014fef0b1779e6c33d63a88a45a563
SHA256:a6bd35c538cf90fff941ad6258c40c08fca0b5c9c3f536c657114f27ce0527a7
Referenced In Project/Scope: psi-probe-rest:compile
pkg:maven/com.github.psi-probe/psi-probe-rest@5.3.1-SNAPSHOT

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	angus-activation	High
Vendor	jar	package name	activation	Highest
Vendor	jar	package name	angus	Highest
Vendor	jar	package name	eclipse	Highest
Vendor	Manifest	bundle-docurl	https://www.eclipse.org	Low
Vendor	Manifest	bundle-symbolicname	angus-activation	Medium
Vendor	Manifest	extension-name	org.eclipse.angus	Medium
Vendor	Manifest	implementation-build-id	2.0.3-RELEASE-6eff4c5	Low
Vendor	Manifest	Implementation-Vendor	Eclipse Foundation	High
Vendor	Manifest	provide-capability	osgi.serviceloader;osgi.serviceloader="jakarta.activation.spi.MailcapRegistryProvider",osgi.serviceloader;osgi.serviceloader="jakarta.activation.spi.MimeTypeRegistryProvider"	Low
Vendor	Manifest	specification-vendor	Eclipse Foundation	Low
Vendor	pom	artifactid	angus-activation	Highest
Vendor	pom	artifactid	angus-activation	Low
Vendor	pom	groupid	org.eclipse.angus	Highest
Vendor	pom	name	Angus Activation Registries	High
Vendor	pom	parent-artifactid	angus-activation-project	Low
Product	file	name	angus-activation	High
Product	jar	package name	activation	Highest
Product	jar	package name	angus	Highest
Product	jar	package name	eclipse	Highest
Product	Manifest	bundle-docurl	https://www.eclipse.org	Low
Product	Manifest	Bundle-Name	Angus Activation Registries	Medium
Product	Manifest	bundle-symbolicname	angus-activation	Medium
Product	Manifest	extension-name	org.eclipse.angus	Medium
Product	Manifest	implementation-build-id	2.0.3-RELEASE-6eff4c5	Low
Product	Manifest	Implementation-Title	Angus Activation Registries	High
Product	Manifest	provide-capability	osgi.serviceloader;osgi.serviceloader="jakarta.activation.spi.MailcapRegistryProvider",osgi.serviceloader;osgi.serviceloader="jakarta.activation.spi.MimeTypeRegistryProvider"	Low
Product	Manifest	specification-title	Jakarta Activation Specification	Medium
Product	pom	artifactid	angus-activation	Highest
Product	pom	groupid	org.eclipse.angus	Highest
Product	pom	name	Angus Activation Registries	High
Product	pom	parent-artifactid	angus-activation-project	Medium
Version	file	version	2.0.3	High
Version	Manifest	Bundle-Version	2.0.3	High
Version	pom	version	2.0.3	Highest

Identifiers

pkg:maven/org.eclipse.angus/angus-activation@2.0.3 (Confidence:High)
cpe:2.3:a:eclipse:jakarta_mail:2.0.3:*:*:*:*:*:*:* (Confidence:Low)

asm-9.7.1.jar

Description:

ASM, a very small and fast Java bytecode manipulation framework

License:

BSD-3-Clause: https://asm.ow2.io/license.html

File Path: /home/runner/.m2/repository/org/ow2/asm/asm/9.7.1/asm-9.7.1.jar
MD5: e2cdd32d198ad31427d298eee9d39d8d
SHA1: f0ed132a49244b042cd0e15702ab9f2ce3cc8436
SHA256:8cadd43ac5eb6d09de05faecca38b917a040bb9139c7edeb4cc81c740b713281
Referenced In Project/Scope: psi-probe-rest:compile
pkg:maven/net.minidev/json-smart@2.6.0

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	asm	High
Vendor	jar	package name	asm	Highest
Vendor	jar	package name	objectweb	Highest
Vendor	Manifest	bundle-docurl	http://asm.ow2.org	Low
Vendor	Manifest	bundle-requiredexecutionenvironment	J2SE-1.5	Low
Vendor	Manifest	bundle-symbolicname	org.objectweb.asm	Medium
Vendor	pom	artifactid	asm	Highest
Vendor	pom	artifactid	asm	Low
Vendor	pom	developer email	ebruneton@free.fr	Low
Vendor	pom	developer email	eu@javatx.org	Low
Vendor	pom	developer email	forax@univ-mlv.fr	Low
Vendor	pom	developer id	ebruneton	Medium
Vendor	pom	developer id	eu	Medium
Vendor	pom	developer id	forax	Medium
Vendor	pom	developer name	Eric Bruneton	Medium
Vendor	pom	developer name	Eugene Kuleshov	Medium
Vendor	pom	developer name	Remi Forax	Medium
Vendor	pom	groupid	org.ow2.asm	Highest
Vendor	pom	name	asm	High
Vendor	pom	organization name	OW2	High
Vendor	pom	organization url	http://www.ow2.org/	Medium
Vendor	pom	parent-artifactid	ow2	Low
Vendor	pom	parent-groupid	org.ow2	Medium
Vendor	pom	url	http://asm.ow2.io/	Highest
Product	file	name	asm	High
Product	jar	package name	asm	Highest
Product	jar	package name	objectweb	Highest
Product	Manifest	bundle-docurl	http://asm.ow2.org	Low
Product	Manifest	Bundle-Name	org.objectweb.asm	Medium
Product	Manifest	bundle-requiredexecutionenvironment	J2SE-1.5	Low
Product	Manifest	bundle-symbolicname	org.objectweb.asm	Medium
Product	Manifest	Implementation-Title	ASM, a very small and fast Java bytecode manipulation framework	High
Product	pom	artifactid	asm	Highest
Product	pom	developer email	ebruneton@free.fr	Low
Product	pom	developer email	eu@javatx.org	Low
Product	pom	developer email	forax@univ-mlv.fr	Low
Product	pom	developer id	ebruneton	Low
Product	pom	developer id	eu	Low
Product	pom	developer id	forax	Low
Product	pom	developer name	Eric Bruneton	Low
Product	pom	developer name	Eugene Kuleshov	Low
Product	pom	developer name	Remi Forax	Low
Product	pom	groupid	org.ow2.asm	Highest
Product	pom	name	asm	High
Product	pom	organization name	OW2	Low
Product	pom	organization url	http://www.ow2.org/	Low
Product	pom	parent-artifactid	ow2	Medium
Product	pom	parent-groupid	org.ow2	Medium
Product	pom	url	http://asm.ow2.io/	Medium
Version	file	version	9.7.1	High
Version	Manifest	Bundle-Version	9.7.1	High
Version	Manifest	Implementation-Version	9.7.1	High
Version	pom	parent-version	9.7.1	Low
Version	pom	version	9.7.1	Highest

Identifiers

pkg:maven/org.ow2.asm/asm@9.7.1 (Confidence:High)

commons-logging-1.3.5.jar

Description:

Apache Commons Logging is a thin adapter allowing configurable bridging to other,
    well-known logging systems.

License:

https://www.apache.org/licenses/LICENSE-2.0.txt

File Path: /home/runner/.m2/repository/commons-logging/commons-logging/1.3.5/commons-logging-1.3.5.jar
MD5: 9ca067b073153c86c2da350c0f2cdf70
SHA1: a3fcc5d3c29b2b03433aa2d2f2d2c1b1638924a1
SHA256:6d7a744e4027649fbb50895df9497d109f98c766a637062fe8d2eabbb3140ba4
Referenced In Project/Scope: psi-probe-rest:compile
pkg:maven/com.github.psi-probe/psi-probe-rest@5.3.1-SNAPSHOT

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	commons-logging	High
Vendor	jar	package name	apache	Highest
Vendor	jar	package name	commons	Highest
Vendor	jar	package name	logging	Highest
Vendor	Manifest	automatic-module-name	org.apache.commons.logging	Medium
Vendor	Manifest	build-jdk-spec	21	Low
Vendor	Manifest	bundle-docurl	https://commons.apache.org/proper/commons-logging/	Low
Vendor	Manifest	bundle-symbolicname	org.apache.commons.commons-logging	Medium
Vendor	Manifest	Implementation-Vendor	The Apache Software Foundation	High
Vendor	Manifest	multi-release	true	Low
Vendor	Manifest	specification-vendor	The Apache Software Foundation	Low
Vendor	pom	artifactid	commons-logging	Highest
Vendor	pom	artifactid	commons-logging	Low
Vendor	pom	developer email	baliuka@apache.org	Low
Vendor	pom	developer email	costin@apache.org	Low
Vendor	pom	developer email	craigmcc@apache.org	Low
Vendor	pom	developer email	dennisl@apache.org	Low
Vendor	pom	developer email	donaldp@apache.org	Low
Vendor	pom	developer email	ggregory at apache.org	Low
Vendor	pom	developer email	morgand@apache.org	Low
Vendor	pom	developer email	rdonkin@apache.org	Low
Vendor	pom	developer email	rsitze@apache.org	Low
Vendor	pom	developer email	rwaldhoff@apache.org	Low
Vendor	pom	developer email	sanders@apache.org	Low
Vendor	pom	developer email	skitching@apache.org	Low
Vendor	pom	developer email	tn@apache.org	Low
Vendor	pom	developer id	baliuka	Medium
Vendor	pom	developer id	bstansberry	Medium
Vendor	pom	developer id	costin	Medium
Vendor	pom	developer id	craigmcc	Medium
Vendor	pom	developer id	dennisl	Medium
Vendor	pom	developer id	donaldp	Medium
Vendor	pom	developer id	ggregory	Medium
Vendor	pom	developer id	morgand	Medium
Vendor	pom	developer id	rdonkin	Medium
Vendor	pom	developer id	rsitze	Medium
Vendor	pom	developer id	rwaldhoff	Medium
Vendor	pom	developer id	sanders	Medium
Vendor	pom	developer id	skitching	Medium
Vendor	pom	developer id	tn	Medium
Vendor	pom	developer name	Brian Stansberry	Medium
Vendor	pom	developer name	Costin Manolache	Medium
Vendor	pom	developer name	Craig McClanahan	Medium
Vendor	pom	developer name	Dennis Lundberg	Medium
Vendor	pom	developer name	Gary Gregory	Medium
Vendor	pom	developer name	Juozas Baliuka	Medium
Vendor	pom	developer name	Morgan Delagrange	Medium
Vendor	pom	developer name	Peter Donald	Medium
Vendor	pom	developer name	Richard Sitze	Medium
Vendor	pom	developer name	Robert Burrell Donkin	Medium
Vendor	pom	developer name	Rodney Waldhoff	Medium
Vendor	pom	developer name	Scott Sanders	Medium
Vendor	pom	developer name	Simon Kitching	Medium
Vendor	pom	developer name	Thomas Neidhart	Medium
Vendor	pom	developer org	Apache	Medium
Vendor	pom	developer org	The Apache Software Foundation	Medium
Vendor	pom	developer org URL	https://www.apache.org/	Medium
Vendor	pom	groupid	commons-logging	Highest
Vendor	pom	name	Apache Commons Logging	High
Vendor	pom	parent-artifactid	commons-parent	Low
Vendor	pom	parent-groupid	org.apache.commons	Medium
Vendor	pom	url	https://commons.apache.org/proper/commons-logging/	Highest
Product	file	name	commons-logging	High
Product	jar	package name	apache	Highest
Product	jar	package name	commons	Highest
Product	jar	package name	logging	Highest
Product	Manifest	automatic-module-name	org.apache.commons.logging	Medium
Product	Manifest	build-jdk-spec	21	Low
Product	Manifest	bundle-docurl	https://commons.apache.org/proper/commons-logging/	Low
Product	Manifest	Bundle-Name	Apache Commons Logging	Medium
Product	Manifest	bundle-symbolicname	org.apache.commons.commons-logging	Medium
Product	Manifest	Implementation-Title	Apache Commons Logging	High
Product	Manifest	multi-release	true	Low
Product	Manifest	specification-title	Apache Commons Logging	Medium
Product	pom	artifactid	commons-logging	Highest
Product	pom	developer email	baliuka@apache.org	Low
Product	pom	developer email	costin@apache.org	Low
Product	pom	developer email	craigmcc@apache.org	Low
Product	pom	developer email	dennisl@apache.org	Low
Product	pom	developer email	donaldp@apache.org	Low
Product	pom	developer email	ggregory at apache.org	Low
Product	pom	developer email	morgand@apache.org	Low
Product	pom	developer email	rdonkin@apache.org	Low
Product	pom	developer email	rsitze@apache.org	Low
Product	pom	developer email	rwaldhoff@apache.org	Low
Product	pom	developer email	sanders@apache.org	Low
Product	pom	developer email	skitching@apache.org	Low
Product	pom	developer email	tn@apache.org	Low
Product	pom	developer id	baliuka	Low
Product	pom	developer id	bstansberry	Low
Product	pom	developer id	costin	Low
Product	pom	developer id	craigmcc	Low
Product	pom	developer id	dennisl	Low
Product	pom	developer id	donaldp	Low
Product	pom	developer id	ggregory	Low
Product	pom	developer id	morgand	Low
Product	pom	developer id	rdonkin	Low
Product	pom	developer id	rsitze	Low
Product	pom	developer id	rwaldhoff	Low
Product	pom	developer id	sanders	Low
Product	pom	developer id	skitching	Low
Product	pom	developer id	tn	Low
Product	pom	developer name	Brian Stansberry	Low
Product	pom	developer name	Costin Manolache	Low
Product	pom	developer name	Craig McClanahan	Low
Product	pom	developer name	Dennis Lundberg	Low
Product	pom	developer name	Gary Gregory	Low
Product	pom	developer name	Juozas Baliuka	Low
Product	pom	developer name	Morgan Delagrange	Low
Product	pom	developer name	Peter Donald	Low
Product	pom	developer name	Richard Sitze	Low
Product	pom	developer name	Robert Burrell Donkin	Low
Product	pom	developer name	Rodney Waldhoff	Low
Product	pom	developer name	Scott Sanders	Low
Product	pom	developer name	Simon Kitching	Low
Product	pom	developer name	Thomas Neidhart	Low
Product	pom	developer org	Apache	Low
Product	pom	developer org	The Apache Software Foundation	Low
Product	pom	developer org URL	https://www.apache.org/	Low
Product	pom	groupid	commons-logging	Highest
Product	pom	name	Apache Commons Logging	High
Product	pom	parent-artifactid	commons-parent	Medium
Product	pom	parent-groupid	org.apache.commons	Medium
Product	pom	url	https://commons.apache.org/proper/commons-logging/	Medium
Version	file	version	1.3.5	High
Version	Manifest	Bundle-Version	1.3.5	High
Version	Manifest	Implementation-Version	1.3.5	High
Version	pom	parent-version	1.3.5	Low
Version	pom	version	1.3.5	Highest

Identifiers

pkg:maven/commons-logging/commons-logging@1.3.5 (Confidence:High)

error_prone_annotations-2.42.0.jar

Description:

Error Prone is a static analysis tool for Java that catches common programming mistakes at compile-time.

License:

Apache 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt

File Path: /home/runner/.m2/repository/com/google/errorprone/error_prone_annotations/2.42.0/error_prone_annotations-2.42.0.jar
MD5: 27a54b790cf5121be1982b585870154d
SHA1: 57a3eddaddd4f2d412e13d3bcefba29b5ebda1b6
SHA256:f282a6488838986b8033bd51888928cff6a59c1050426476553ed2622b89e510
Referenced In Project/Scope: psi-probe-rest:provided
pkg:maven/com.github.psi-probe/psi-probe-rest@5.3.1-SNAPSHOT

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	error_prone_annotations	High
Vendor	jar	package name	annotations	Highest
Vendor	jar	package name	errorprone	Highest
Vendor	jar	package name	google	Highest
Vendor	Manifest	build-jdk-spec	17	Low
Vendor	Manifest	bundle-docurl	https://errorprone.info/error_prone_annotations	Low
Vendor	Manifest	bundle-symbolicname	com.google.errorprone.annotations	Medium
Vendor	Manifest	multi-release	true	Low
Vendor	pom	artifactid	error_prone_annotations	Highest
Vendor	pom	artifactid	error_prone_annotations	Low
Vendor	pom	groupid	com.google.errorprone	Highest
Vendor	pom	name	error-prone annotations	High
Vendor	pom	parent-artifactid	error_prone_parent	Low
Product	file	name	error_prone_annotations	High
Product	jar	package name	annotations	Highest
Product	jar	package name	errorprone	Highest
Product	jar	package name	google	Highest
Product	Manifest	build-jdk-spec	17	Low
Product	Manifest	bundle-docurl	https://errorprone.info/error_prone_annotations	Low
Product	Manifest	Bundle-Name	error-prone annotations	Medium
Product	Manifest	bundle-symbolicname	com.google.errorprone.annotations	Medium
Product	Manifest	multi-release	true	Low
Product	pom	artifactid	error_prone_annotations	Highest
Product	pom	groupid	com.google.errorprone	Highest
Product	pom	name	error-prone annotations	High
Product	pom	parent-artifactid	error_prone_parent	Medium
Version	file	version	2.42.0	High
Version	Manifest	Bundle-Version	2.42.0	High
Version	pom	version	2.42.0	Highest

Identifiers

pkg:maven/com.google.errorprone/error_prone_annotations@2.42.0 (Confidence:High)

j2objc-annotations-3.1.jar

Description:

    A set of annotations that provide additional information to the J2ObjC
    translator to modify the result of translation.

License:

Apache License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt

File Path: /home/runner/.m2/repository/com/google/j2objc/j2objc-annotations/3.1/j2objc-annotations-3.1.jar
MD5: abe8bd3abff622b9a8b15c3a737aa741
SHA1: a892ca9507839bbdb900d64310ac98256cab992f
SHA256:84d3a150518485f8140ea99b8a985656749629f6433c92b80c75b36aba3b099b
Referenced In Project/Scope: psi-probe-rest:provided
pkg:maven/com.github.psi-probe/psi-probe-rest@5.3.1-SNAPSHOT

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	j2objc-annotations	High
Vendor	jar	package name	annotations	Highest
Vendor	jar	package name	google	Highest
Vendor	jar	package name	j2objc	Highest
Vendor	Manifest	build-jdk-spec	22	Low
Vendor	Manifest	multi-release	true	Low
Vendor	pom	artifactid	j2objc-annotations	Highest
Vendor	pom	artifactid	j2objc-annotations	Low
Vendor	pom	developer email	tball@google.com	Low
Vendor	pom	developer id	tomball	Medium
Vendor	pom	developer name	Tom Ball	Medium
Vendor	pom	developer org	Google	Medium
Vendor	pom	developer org URL	https://www.google.com	Medium
Vendor	pom	groupid	com.google.j2objc	Highest
Vendor	pom	name	J2ObjC Annotations	High
Vendor	pom	url	google/j2objc/	Highest
Product	file	name	j2objc-annotations	High
Product	jar	package name	annotations	Highest
Product	jar	package name	google	Highest
Product	jar	package name	j2objc	Highest
Product	Manifest	build-jdk-spec	22	Low
Product	Manifest	multi-release	true	Low
Product	pom	artifactid	j2objc-annotations	Highest
Product	pom	developer email	tball@google.com	Low
Product	pom	developer id	tomball	Low
Product	pom	developer name	Tom Ball	Low
Product	pom	developer org	Google	Low
Product	pom	developer org URL	https://www.google.com	Low
Product	pom	groupid	com.google.j2objc	Highest
Product	pom	name	J2ObjC Annotations	High
Product	pom	url	google/j2objc/	High
Version	file	version	3.1	High
Version	pom	version	3.1	Highest

Identifiers

pkg:maven/com.google.j2objc/j2objc-annotations@3.1 (Confidence:High)

jakarta.activation-api-2.1.4.jar

Description:

  Specification

License:

EDL 1.0: http://www.eclipse.org/org/documents/edl-v10.php

File Path: /home/runner/.m2/repository/jakarta/activation/jakarta.activation-api/2.1.4/jakarta.activation-api-2.1.4.jar
MD5: bc1602eee7bc61a0b86f14bbbb0cc794
SHA1: 9e5c2a0d75dde71a0bedc4dbdbe47b78a5dc50f8
SHA256:c9db52100ce6c8aac95cc39075f95720d2e561b11f8051b81c121ad4effd7004
Referenced In Project/Scope: psi-probe-rest:compile
pkg:maven/com.github.psi-probe/psi-probe-rest@5.3.1-SNAPSHOT

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	jakarta.activation-api	High
Vendor	jar	package name	activation	Highest
Vendor	jar	package name	jakarta	Highest
Vendor	Manifest	bundle-docurl	https://www.eclipse.org	Low
Vendor	Manifest	bundle-symbolicname	jakarta.activation-api	Medium
Vendor	Manifest	extension-name	jakarta.activation	Medium
Vendor	Manifest	implementation-build-id	3dad341	Low
Vendor	Manifest	Implementation-Vendor	Eclipse Foundation	High
Vendor	Manifest	specification-vendor	Eclipse Foundation	Low
Vendor	pom	artifactid	jakarta.activation-api	Highest
Vendor	pom	artifactid	jakarta.activation-api	Low
Vendor	pom	developer email	bill.shannon@oracle.com	Low
Vendor	pom	developer id	shannon	Medium
Vendor	pom	developer name	Bill Shannon	Medium
Vendor	pom	developer org	Oracle	Medium
Vendor	pom	groupid	jakarta.activation	Highest
Vendor	pom	name	Jakarta Activation API	High
Vendor	pom	parent-artifactid	project	Low
Vendor	pom	parent-groupid	org.eclipse.ee4j	Medium
Vendor	pom	url	jakartaee/jaf-api	Highest
Vendor	pom (hint)	developer org	sun	Medium
Product	file	name	jakarta.activation-api	High
Product	jar	package name	activation	Highest
Product	jar	package name	jakarta	Highest
Product	Manifest	bundle-docurl	https://www.eclipse.org	Low
Product	Manifest	Bundle-Name	Jakarta Activation API	Medium
Product	Manifest	bundle-symbolicname	jakarta.activation-api	Medium
Product	Manifest	extension-name	jakarta.activation	Medium
Product	Manifest	implementation-build-id	3dad341	Low
Product	Manifest	Implementation-Title	Jakarta Activation API	High
Product	Manifest	specification-title	Jakarta Activation Specification	Medium
Product	pom	artifactid	jakarta.activation-api	Highest
Product	pom	developer email	bill.shannon@oracle.com	Low
Product	pom	developer id	shannon	Low
Product	pom	developer name	Bill Shannon	Low
Product	pom	developer org	Oracle	Low
Product	pom	groupid	jakarta.activation	Highest
Product	pom	name	Jakarta Activation API	High
Product	pom	parent-artifactid	project	Medium
Product	pom	parent-groupid	org.eclipse.ee4j	Medium
Product	pom	url	jakartaee/jaf-api	High
Version	file	version	2.1.4	High
Version	Manifest	Bundle-Version	2.1.4	High
Version	pom	parent-version	2.1.4	Low
Version	pom	version	2.1.4	Highest

Identifiers

pkg:maven/jakarta.activation/jakarta.activation-api@2.1.4 (Confidence:High)

json-path-2.9.0.jar

Description:

A library to query and verify JSON

License:

The Apache Software License, Version 2.0: https://www.apache.org/licenses/LICENSE-2.0.txt

File Path: /home/runner/.m2/repository/com/jayway/jsonpath/json-path/2.9.0/json-path-2.9.0.jar
MD5: e89678d2e4ff45e4f39a97ccd0223719
SHA1: 37fe2217f577b0b68b18e62c4d17a8858ecf9b69
SHA256:11a9ee6f88bb31f1450108d1cf6441377dec84aca075eb6bb2343be157575bea
Referenced In Project/Scope: psi-probe-rest:compile
pkg:maven/com.github.psi-probe/psi-probe-rest@5.3.1-SNAPSHOT

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	json-path	High
Vendor	jar	package name	jayway	Highest
Vendor	jar	package name	json	Highest
Vendor	jar	package name	jsonpath	Highest
Vendor	jar	package name	path	Highest
Vendor	Manifest	automatic-module-name	json.path	Medium
Vendor	Manifest	bundle-symbolicname	json-path	Medium
Vendor	pom	artifactid	json-path	Highest
Vendor	pom	artifactid	json-path	Low
Vendor	pom	developer email	kalle.stenflo (a) gmail.com	Low
Vendor	pom	developer id	kalle.stenflo	Medium
Vendor	pom	developer name	Kalle Stenflo	Medium
Vendor	pom	groupid	com.jayway.jsonpath	Highest
Vendor	pom	name	json-path	High
Vendor	pom	url	jayway/JsonPath	Highest
Product	file	name	json-path	High
Product	jar	package name	jayway	Highest
Product	jar	package name	json	Highest
Product	jar	package name	jsonpath	Highest
Product	jar	package name	path	Highest
Product	Manifest	automatic-module-name	json.path	Medium
Product	Manifest	Bundle-Name	json-path	Medium
Product	Manifest	bundle-symbolicname	json-path	Medium
Product	Manifest	Implementation-Title	json-path	High
Product	pom	artifactid	json-path	Highest
Product	pom	developer email	kalle.stenflo (a) gmail.com	Low
Product	pom	developer id	kalle.stenflo	Low
Product	pom	developer name	Kalle Stenflo	Low
Product	pom	groupid	com.jayway.jsonpath	Highest
Product	pom	name	json-path	High
Product	pom	url	jayway/JsonPath	High
Version	file	version	2.9.0	High
Version	Manifest	Bundle-Version	2.9.0	High
Version	pom	version	2.9.0	Highest

Identifiers

pkg:maven/com.jayway.jsonpath/json-path@2.9.0 (Confidence:High)
cpe:2.3:a:json-path:jayway_jsonpath:2.9.0:*:*:*:*:*:*:* (Confidence:Highest)

json-smart-2.6.0.jar

Description:

JSON (JavaScript Object Notation) is a lightweight data-interchange format. It is easy for humans to read and write. It is easy for machines to parse and generate. It is based on a subset of the JavaScript Programming Language, Standard ECMA-262 3rd Edition - December 1999. JSON is a text format that is completely language independent but uses conventions that are familiar to programmers of the C-family of languages, including C, C++, C#, Java, JavaScript, Perl, Python, and many others. These properties make JSON an ideal data-interchange language.

License:

The Apache Software License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt

File Path: /home/runner/.m2/repository/net/minidev/json-smart/2.6.0/json-smart-2.6.0.jar
MD5: fde8981f31c3b972355a5adf26a9ec65
SHA1: 5f858a43a325a8673da6869ab2bc787a1bcb2244
SHA256:1ae4b561458afb540be8ec5c6dbb4f2e715a319a7ae64854998aaf924770d61b
Referenced In Project/Scope: psi-probe-rest:compile
pkg:maven/com.github.psi-probe/psi-probe-rest@5.3.1-SNAPSHOT

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	json-smart	High
Vendor	jar	package name	json	Highest
Vendor	jar	package name	minidev	Highest
Vendor	jar	package name	net	Highest
Vendor	jar	package name	parser	Highest
Vendor	Manifest	build-jdk-spec	17	Low
Vendor	Manifest	bundle-docurl	https://urielch.github.io/	Low
Vendor	Manifest	bundle-symbolicname	net.minidev.json-smart	Medium
Vendor	pom	artifactid	json-smart	Highest
Vendor	pom	artifactid	json-smart	Low
Vendor	pom	developer email	adoneitan@gmail.com	Low
Vendor	pom	developer email	hezhangjian97gmail.com	Low
Vendor	pom	developer email	uchemouni@gmail.com	Low
Vendor	pom	developer id	erav	Medium
Vendor	pom	developer id	hezhangjian	Medium
Vendor	pom	developer id	uriel	Medium
Vendor	pom	developer name	Eitan Raviv	Medium
Vendor	pom	developer name	Uriel Chemouni	Medium
Vendor	pom	developer name	Zhangjian He	Medium
Vendor	pom	groupid	net.minidev	Highest
Vendor	pom	name	JSON Small and Fast Parser	High
Vendor	pom	organization name	Chemouni Uriel	High
Vendor	pom	organization url	https://urielch.github.io/	Medium
Vendor	pom	url	https://urielch.github.io/	Highest
Product	file	name	json-smart	High
Product	jar	package name	json	Highest
Product	jar	package name	minidev	Highest
Product	jar	package name	net	Highest
Product	jar	package name	parser	Highest
Product	Manifest	build-jdk-spec	17	Low
Product	Manifest	bundle-docurl	https://urielch.github.io/	Low
Product	Manifest	Bundle-Name	json-smart	Medium
Product	Manifest	bundle-symbolicname	net.minidev.json-smart	Medium
Product	pom	artifactid	json-smart	Highest
Product	pom	developer email	adoneitan@gmail.com	Low
Product	pom	developer email	hezhangjian97gmail.com	Low
Product	pom	developer email	uchemouni@gmail.com	Low
Product	pom	developer id	erav	Low
Product	pom	developer id	hezhangjian	Low
Product	pom	developer id	uriel	Low
Product	pom	developer name	Eitan Raviv	Low
Product	pom	developer name	Uriel Chemouni	Low
Product	pom	developer name	Zhangjian He	Low
Product	pom	groupid	net.minidev	Highest
Product	pom	name	JSON Small and Fast Parser	High
Product	pom	organization name	Chemouni Uriel	Low
Product	pom	organization url	https://urielch.github.io/	Low
Product	pom	url	https://urielch.github.io/	Medium
Version	file	version	2.6.0	High
Version	Manifest	Bundle-Version	2.6.0	High
Version	pom	version	2.6.0	Highest

Identifiers

pkg:maven/net.minidev/json-smart@2.6.0 (Confidence:High)
cpe:2.3:a:json-smart_project:json-smart:2.6.0:*:*:*:*:*:*:* (Confidence:Highest)
cpe:2.3:a:json-smart_project:json-smart-v2:2.6.0:*:*:*:*:*:*:* (Confidence:Low)

jsr305-3.0.2.jar

Description:

JSR305 Annotations for Findbugs

License:

The Apache Software License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt

File Path: /home/runner/.m2/repository/com/google/code/findbugs/jsr305/3.0.2/jsr305-3.0.2.jar
MD5: dd83accb899363c32b07d7a1b2e4ce40
SHA1: 25ea2e8b0c338a877313bd4672d3fe056ea78f0d
SHA256:766ad2a0783f2687962c8ad74ceecc38a28b9f72a2d085ee438b7813e928d0c7
Referenced In Project/Scope: psi-probe-rest:provided
pkg:maven/com.github.spotbugs/spotbugs-annotations@4.9.8

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	jsr305	High
Vendor	Manifest	bundle-symbolicname	org.jsr-305	Medium
Vendor	pom	artifactid	jsr305	Highest
Vendor	pom	artifactid	jsr305	Low
Vendor	pom	groupid	com.google.code.findbugs	Highest
Vendor	pom	name	FindBugs-jsr305	High
Vendor	pom	url	http://findbugs.sourceforge.net/	Highest
Product	file	name	jsr305	High
Product	Manifest	Bundle-Name	FindBugs-jsr305	Medium
Product	Manifest	bundle-symbolicname	org.jsr-305	Medium
Product	pom	artifactid	jsr305	Highest
Product	pom	groupid	com.google.code.findbugs	Highest
Product	pom	name	FindBugs-jsr305	High
Product	pom	url	http://findbugs.sourceforge.net/	Medium
Version	file	version	3.0.2	High
Version	Manifest	Bundle-Version	3.0.2	High
Version	pom	version	3.0.2	Highest

Identifiers

pkg:maven/com.google.code.findbugs/jsr305@3.0.2 (Confidence:High)

micrometer-commons-1.14.12.jar

Description:

Module containing common code

License:

The Apache Software License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt

File Path: /home/runner/.m2/repository/io/micrometer/micrometer-commons/1.14.12/micrometer-commons-1.14.12.jar
MD5: 73d02817a01558776dbc5a43b1774add
SHA1: 86459b0c760a1ab5fc17da330203f25ba36f642b
SHA256:83408660d54149650da3658fa65b055158115ac91c900b3812022e1a24a35483
Referenced In Project/Scope: psi-probe-rest:compile
pkg:maven/org.springframework.hateoas/spring-hateoas@2.5.1

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	micrometer-commons	High
Vendor	jar	package name	common	Highest
Vendor	jar	package name	io	Highest
Vendor	jar	package name	micrometer	Highest
Vendor	Manifest	automatic-module-name	micrometer.commons	Medium
Vendor	Manifest	branch	HEAD	Low
Vendor	Manifest	build-date	2025-10-13_21:20:24	Low
Vendor	Manifest	build-date-utc	2025-10-13T21:20:24.190164921Z	Low
Vendor	Manifest	build-host	fdfdbc81de65	Low
Vendor	Manifest	build-job	deploy	Low
Vendor	Manifest	build-number	57179	Low
Vendor	Manifest	build-timezone	Etc/UTC	Low
Vendor	Manifest	build-url	https://circleci.com/gh/micrometer-metrics/micrometer/57179	Low
Vendor	Manifest	built-os	Linux	Low
Vendor	Manifest	built-status	release	Low
Vendor	Manifest	bundle-symbolicname	micrometer-commons	Medium
Vendor	Manifest	change	bae31eb	Low
Vendor	Manifest	full-change	bae31ebd225042c386478b3d226b3ae3a053d0b1	Low
Vendor	Manifest	module-email	tludwig@vmware.com	Low
Vendor	Manifest	module-origin	micrometer-metrics/micrometer.git	Low
Vendor	Manifest	module-owner	tludwig@vmware.com	Low
Vendor	Manifest	module-source	/micrometer-commons	Low
Vendor	pom	artifactid	micrometer-commons	Highest
Vendor	pom	artifactid	micrometer-commons	Low
Vendor	pom	developer email	tludwig@vmware.com	Low
Vendor	pom	developer id	shakuzen	Medium
Vendor	pom	developer name	Tommy Ludwig	Medium
Vendor	pom	groupid	io.micrometer	Highest
Vendor	pom	name	micrometer-commons	High
Vendor	pom	url	micrometer-metrics/micrometer	Highest
Product	file	name	micrometer-commons	High
Product	jar	package name	common	Highest
Product	jar	package name	io	Highest
Product	jar	package name	micrometer	Highest
Product	Manifest	automatic-module-name	micrometer.commons	Medium
Product	Manifest	branch	HEAD	Low
Product	Manifest	build-date	2025-10-13_21:20:24	Low
Product	Manifest	build-date-utc	2025-10-13T21:20:24.190164921Z	Low
Product	Manifest	build-host	fdfdbc81de65	Low
Product	Manifest	build-job	deploy	Low
Product	Manifest	build-number	57179	Low
Product	Manifest	build-timezone	Etc/UTC	Low
Product	Manifest	build-url	https://circleci.com/gh/micrometer-metrics/micrometer/57179	Low
Product	Manifest	built-os	Linux	Low
Product	Manifest	built-status	release	Low
Product	Manifest	Bundle-Name	micrometer-commons	Medium
Product	Manifest	bundle-symbolicname	micrometer-commons	Medium
Product	Manifest	change	bae31eb	Low
Product	Manifest	full-change	bae31ebd225042c386478b3d226b3ae3a053d0b1	Low
Product	Manifest	Implementation-Title	io.micrometer#micrometer-commons;1.14.12	High
Product	Manifest	module-email	tludwig@vmware.com	Low
Product	Manifest	module-origin	micrometer-metrics/micrometer.git	Low
Product	Manifest	module-owner	tludwig@vmware.com	Low
Product	Manifest	module-source	/micrometer-commons	Low
Product	pom	artifactid	micrometer-commons	Highest
Product	pom	developer email	tludwig@vmware.com	Low
Product	pom	developer id	shakuzen	Low
Product	pom	developer name	Tommy Ludwig	Low
Product	pom	groupid	io.micrometer	Highest
Product	pom	name	micrometer-commons	High
Product	pom	url	micrometer-metrics/micrometer	High
Version	file	version	1.14.12	High
Version	Manifest	Bundle-Version	1.14.12	High
Version	Manifest	Implementation-Version	1.14.12	High
Version	pom	version	1.14.12	Highest

Identifiers

pkg:maven/io.micrometer/micrometer-commons@1.14.12 (Confidence:High)

micrometer-observation-1.14.12.jar

Description:

Module containing Observation related code

License:

The Apache Software License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt

File Path: /home/runner/.m2/repository/io/micrometer/micrometer-observation/1.14.12/micrometer-observation-1.14.12.jar
MD5: 8b63abb3fb62f7ff52f3f20f5f3c7b86
SHA1: 5e20ee1facc4414938f57d6546b3dbd94c10b642
SHA256:430be17d568533f3bb4234d1a7ab3018509967c582c2212770e81bcf933a99b8
Referenced In Project/Scope: psi-probe-rest:compile
pkg:maven/org.springframework.hateoas/spring-hateoas@2.5.1

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	micrometer-observation	High
Vendor	jar	package name	io	Highest
Vendor	jar	package name	micrometer	Highest
Vendor	jar	package name	observation	Highest
Vendor	Manifest	automatic-module-name	micrometer.observation	Medium
Vendor	Manifest	branch	HEAD	Low
Vendor	Manifest	build-date	2025-10-13_21:20:24	Low
Vendor	Manifest	build-date-utc	2025-10-13T21:20:24.591648202Z	Low
Vendor	Manifest	build-host	fdfdbc81de65	Low
Vendor	Manifest	build-job	deploy	Low
Vendor	Manifest	build-number	57179	Low
Vendor	Manifest	build-timezone	Etc/UTC	Low
Vendor	Manifest	build-url	https://circleci.com/gh/micrometer-metrics/micrometer/57179	Low
Vendor	Manifest	built-os	Linux	Low
Vendor	Manifest	built-status	release	Low
Vendor	Manifest	bundle-symbolicname	micrometer-observation	Medium
Vendor	Manifest	change	bae31eb	Low
Vendor	Manifest	full-change	bae31ebd225042c386478b3d226b3ae3a053d0b1	Low
Vendor	Manifest	module-email	tludwig@vmware.com	Low
Vendor	Manifest	module-origin	micrometer-metrics/micrometer.git	Low
Vendor	Manifest	module-owner	tludwig@vmware.com	Low
Vendor	Manifest	module-source	/micrometer-observation	Low
Vendor	pom	artifactid	micrometer-observation	Highest
Vendor	pom	artifactid	micrometer-observation	Low
Vendor	pom	developer email	tludwig@vmware.com	Low
Vendor	pom	developer id	shakuzen	Medium
Vendor	pom	developer name	Tommy Ludwig	Medium
Vendor	pom	groupid	io.micrometer	Highest
Vendor	pom	name	micrometer-observation	High
Vendor	pom	url	micrometer-metrics/micrometer	Highest
Product	file	name	micrometer-observation	High
Product	jar	package name	io	Highest
Product	jar	package name	micrometer	Highest
Product	jar	package name	observation	Highest
Product	Manifest	automatic-module-name	micrometer.observation	Medium
Product	Manifest	branch	HEAD	Low
Product	Manifest	build-date	2025-10-13_21:20:24	Low
Product	Manifest	build-date-utc	2025-10-13T21:20:24.591648202Z	Low
Product	Manifest	build-host	fdfdbc81de65	Low
Product	Manifest	build-job	deploy	Low
Product	Manifest	build-number	57179	Low
Product	Manifest	build-timezone	Etc/UTC	Low
Product	Manifest	build-url	https://circleci.com/gh/micrometer-metrics/micrometer/57179	Low
Product	Manifest	built-os	Linux	Low
Product	Manifest	built-status	release	Low
Product	Manifest	Bundle-Name	micrometer-observation	Medium
Product	Manifest	bundle-symbolicname	micrometer-observation	Medium
Product	Manifest	change	bae31eb	Low
Product	Manifest	full-change	bae31ebd225042c386478b3d226b3ae3a053d0b1	Low
Product	Manifest	Implementation-Title	io.micrometer#micrometer-observation;1.14.12	High
Product	Manifest	module-email	tludwig@vmware.com	Low
Product	Manifest	module-origin	micrometer-metrics/micrometer.git	Low
Product	Manifest	module-owner	tludwig@vmware.com	Low
Product	Manifest	module-source	/micrometer-observation	Low
Product	pom	artifactid	micrometer-observation	Highest
Product	pom	developer email	tludwig@vmware.com	Low
Product	pom	developer id	shakuzen	Low
Product	pom	developer name	Tommy Ludwig	Low
Product	pom	groupid	io.micrometer	Highest
Product	pom	name	micrometer-observation	High
Product	pom	url	micrometer-metrics/micrometer	High
Version	file	version	1.14.12	High
Version	Manifest	Bundle-Version	1.14.12	High
Version	Manifest	Implementation-Version	1.14.12	High
Version	pom	version	1.14.12	Highest

Identifiers

pkg:maven/io.micrometer/micrometer-observation@1.14.12 (Confidence:High)

slf4j-api-2.0.17.jar

Description:

The slf4j API

License:

https://opensource.org/license/mit

File Path: /home/runner/.m2/repository/org/slf4j/slf4j-api/2.0.17/slf4j-api-2.0.17.jar
MD5: b6480d114a23683498ac3f746f959d2f
SHA1: d9e58ac9c7779ba3bf8142aff6c830617a7fe60f
SHA256:7b751d952061954d5abfed7181c1f645d336091b679891591d63329c622eb832
Referenced In Project/Scope: psi-probe-rest:compile
pkg:maven/org.springframework.hateoas/spring-hateoas@2.5.1

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	slf4j-api	High
Vendor	jar	package name	slf4j	Highest
Vendor	Manifest	build-jdk-spec	21	Low
Vendor	Manifest	bundle-docurl	http://www.slf4j.org	Low
Vendor	Manifest	bundle-symbolicname	slf4j.api	Medium
Vendor	Manifest	multi-release	true	Low
Vendor	pom	artifactid	slf4j-api	Highest
Vendor	pom	artifactid	slf4j-api	Low
Vendor	pom	groupid	org.slf4j	Highest
Vendor	pom	name	SLF4J API Module	High
Vendor	pom	parent-artifactid	slf4j-parent	Low
Vendor	pom	url	http://www.slf4j.org	Highest
Product	file	name	slf4j-api	High
Product	jar	package name	slf4j	Highest
Product	Manifest	build-jdk-spec	21	Low
Product	Manifest	bundle-docurl	http://www.slf4j.org	Low
Product	Manifest	Bundle-Name	SLF4J API Module	Medium
Product	Manifest	bundle-symbolicname	slf4j.api	Medium
Product	Manifest	Implementation-Title	slf4j-api	High
Product	Manifest	multi-release	true	Low
Product	pom	artifactid	slf4j-api	Highest
Product	pom	groupid	org.slf4j	Highest
Product	pom	name	SLF4J API Module	High
Product	pom	parent-artifactid	slf4j-parent	Medium
Product	pom	url	http://www.slf4j.org	Medium
Version	file	version	2.0.17	High
Version	Manifest	Bundle-Version	2.0.17	High
Version	Manifest	Implementation-Version	2.0.17	High
Version	pom	version	2.0.17	Highest

Identifiers

pkg:maven/org.slf4j/slf4j-api@2.0.17 (Confidence:High)

spotbugs-annotations-4.9.8.jar

Description:

Annotations the SpotBugs tool supports

License:

GNU LESSER GENERAL PUBLIC LICENSE, Version 2.1: https://www.gnu.org/licenses/old-licenses/lgpl-2.1.en.html

File Path: /home/runner/.m2/repository/com/github/spotbugs/spotbugs-annotations/4.9.8/spotbugs-annotations-4.9.8.jar
MD5: d4c2e7bd090be697ad409a4e75684a94
SHA1: ca4a2783a6123e67124fd7feb4caccd2e2ac9a73
SHA256:6f69d6fe9c55a54dcb30e87d8fa2d5f52246af50d7a3445246d9539ef221be1c
Referenced In Project/Scope: psi-probe-rest:provided
pkg:maven/com.github.psi-probe/psi-probe-rest@5.3.1-SNAPSHOT

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	spotbugs-annotations	High
Vendor	Manifest	automatic-module-name	com.github.spotbugs.annotations	Medium
Vendor	Manifest	bundle-requiredexecutionenvironment	JavaSE-1.8	Low
Vendor	Manifest	bundle-symbolicname	spotbugs-annotations	Medium
Vendor	pom	artifactid	spotbugs-annotations	Highest
Vendor	pom	artifactid	spotbugs-annotations	Low
Vendor	pom	developer email	andreas.sewe@codetrails.com	Low
Vendor	pom	developer email	dbrosius@mebigfatguy.com	Low
Vendor	pom	developer email	loskutov@gmx.de	Low
Vendor	pom	developer email	skypencil@gmail.com	Low
Vendor	pom	developer id	henrik242	Medium
Vendor	pom	developer id	iloveeclipse	Medium
Vendor	pom	developer id	jsotuyod	Medium
Vendor	pom	developer id	KengoTODA	Medium
Vendor	pom	developer id	mebigfatguy	Medium
Vendor	pom	developer id	sewe	Medium
Vendor	pom	developer id	ThrawnCA	Medium
Vendor	pom	developer name	Andreas Sewe	Medium
Vendor	pom	developer name	Andrey Loskutov	Medium
Vendor	pom	developer name	Dave Brosius	Medium
Vendor	pom	developer name	Juan Martín Sotuyo Dodero	Medium
Vendor	pom	developer name	Kengo TODA	Medium
Vendor	pom	groupid	com.github.spotbugs	Highest
Vendor	pom	name	SpotBugs Annotations	High
Vendor	pom	url	https://spotbugs.github.io/	Highest
Product	file	name	spotbugs-annotations	High
Product	Manifest	automatic-module-name	com.github.spotbugs.annotations	Medium
Product	Manifest	Bundle-Name	spotbugs-annotations	Medium
Product	Manifest	bundle-requiredexecutionenvironment	JavaSE-1.8	Low
Product	Manifest	bundle-symbolicname	spotbugs-annotations	Medium
Product	pom	artifactid	spotbugs-annotations	Highest
Product	pom	developer email	andreas.sewe@codetrails.com	Low
Product	pom	developer email	dbrosius@mebigfatguy.com	Low
Product	pom	developer email	loskutov@gmx.de	Low
Product	pom	developer email	skypencil@gmail.com	Low
Product	pom	developer id	henrik242	Low
Product	pom	developer id	iloveeclipse	Low
Product	pom	developer id	jsotuyod	Low
Product	pom	developer id	KengoTODA	Low
Product	pom	developer id	mebigfatguy	Low
Product	pom	developer id	sewe	Low
Product	pom	developer id	ThrawnCA	Low
Product	pom	developer name	Andreas Sewe	Low
Product	pom	developer name	Andrey Loskutov	Low
Product	pom	developer name	Dave Brosius	Low
Product	pom	developer name	Juan Martín Sotuyo Dodero	Low
Product	pom	developer name	Kengo TODA	Low
Product	pom	groupid	com.github.spotbugs	Highest
Product	pom	name	SpotBugs Annotations	High
Product	pom	url	https://spotbugs.github.io/	Medium
Version	file	version	4.9.8	High
Version	Manifest	Bundle-Version	4.9.8	High
Version	pom	version	4.9.8	Highest

Identifiers

pkg:maven/com.github.spotbugs/spotbugs-annotations@4.9.8 (Confidence:High)

spring-core-6.2.12.jar

Description:

Spring Core

License:

Apache License, Version 2.0: https://www.apache.org/licenses/LICENSE-2.0

File Path: /home/runner/.m2/repository/org/springframework/spring-core/6.2.12/spring-core-6.2.12.jar
MD5: 5495c7d311d73ddaf6fdf3d198b7bab1
SHA1: 298bd954610442d54b276f911d3490372ab62117
SHA256:bddc5a5be2d94191ebcfbadc672fa4d81e6ab51e38a9eaf41d5d035cb17548d4
Referenced In Project/Scope: psi-probe-rest:compile
pkg:maven/org.springframework.hateoas/spring-hateoas@2.5.1

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	spring-core	High
Vendor	hint analyzer	vendor	pivotal software	Highest
Vendor	hint analyzer	vendor	SpringSource	Highest
Vendor	hint analyzer	vendor	vmware	Highest
Vendor	jar	package name	core	Highest
Vendor	jar	package name	io	Highest
Vendor	jar	package name	org	Highest
Vendor	jar	package name	springframework	Highest
Vendor	Manifest	automatic-module-name	spring.core	Medium
Vendor	Manifest	multi-release	true	Low
Vendor	pom	artifactid	spring-core	Highest
Vendor	pom	artifactid	spring-core	Low
Vendor	pom	developer email	juergen.hoeller@broadcom.com	Low
Vendor	pom	developer id	jhoeller	Medium
Vendor	pom	developer name	Juergen Hoeller	Medium
Vendor	pom	groupid	org.springframework	Highest
Vendor	pom	name	Spring Core	High
Vendor	pom	organization name	Spring IO	High
Vendor	pom	organization url	https://spring.io/projects/spring-framework	Medium
Vendor	pom	url	spring-projects/spring-framework	Highest
Product	file	name	spring-core	High
Product	hint analyzer	product	springsource_spring_framework	Highest
Product	jar	package name	core	Highest
Product	jar	package name	io	Highest
Product	jar	package name	org	Highest
Product	jar	package name	springframework	Highest
Product	Manifest	automatic-module-name	spring.core	Medium
Product	Manifest	Implementation-Title	spring-core	High
Product	Manifest	multi-release	true	Low
Product	pom	artifactid	spring-core	Highest
Product	pom	developer email	juergen.hoeller@broadcom.com	Low
Product	pom	developer id	jhoeller	Low
Product	pom	developer name	Juergen Hoeller	Low
Product	pom	groupid	org.springframework	Highest
Product	pom	name	Spring Core	High
Product	pom	organization name	Spring IO	Low
Product	pom	organization url	https://spring.io/projects/spring-framework	Low
Product	pom	url	spring-projects/spring-framework	High
Version	file	version	6.2.12	High
Version	Manifest	Implementation-Version	6.2.12	High
Version	pom	version	6.2.12	Highest

Related Dependencies

Identifiers

pkg:maven/org.springframework/spring-core@6.2.12 (Confidence:High)
cpe:2.3:a:pivotal_software:spring_framework:6.2.12:*:*:*:*:*:*:* (Confidence:Highest)
cpe:2.3:a:springsource:spring_framework:6.2.12:*:*:*:*:*:*:* (Confidence:Highest)
cpe:2.3:a:vmware:spring_framework:6.2.12:*:*:*:*:*:*:* (Confidence:Highest)

spring-hateoas-2.5.1.jar

Description:

Library to support implementing representations for
		hyper-text driven REST web services.

License:

Apache License, Version 2.0: https://www.apache.org/licenses/LICENSE-2.0

File Path: /home/runner/.m2/repository/org/springframework/hateoas/spring-hateoas/2.5.1/spring-hateoas-2.5.1.jar
MD5: 2d5642542ef1527f434de00329bd02b9
SHA1: 8d01e1a635fd5be08f7c277fe3284aa7ed1568c4
SHA256:5f8c303a42253b05329cb8141b4c6d2795253adb2e51d788210f882586103f4e
Referenced In Project/Scope: psi-probe-rest:compile
pkg:maven/com.github.psi-probe/psi-probe-rest@5.3.1-SNAPSHOT

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	spring-hateoas	High
Vendor	hint analyzer	vendor	pivotal software	Highest
Vendor	hint analyzer	vendor	SpringSource	Highest
Vendor	hint analyzer	vendor	vmware	Highest
Vendor	jar	package name	hateoas	Highest
Vendor	jar	package name	springframework	Highest
Vendor	jar	package name	support	Highest
Vendor	Manifest	automatic-module-name	spring.hateoas	Medium
Vendor	Manifest	build-jdk-spec	17	Low
Vendor	pom	artifactid	spring-hateoas	Highest
Vendor	pom	artifactid	spring-hateoas	Low
Vendor	pom	developer email	gturnquist(at)vmware.com	Low
Vendor	pom	developer email	odrotbohm(at)vmware.com	Low
Vendor	pom	developer id	gturnquist	Medium
Vendor	pom	developer id	odrotbohm	Medium
Vendor	pom	developer name	Greg Turnquist	Medium
Vendor	pom	developer name	Oliver Drotbohm	Medium
Vendor	pom	developer org	VMware, Inc.	Medium
Vendor	pom	groupid	org.springframework.hateoas	Highest
Vendor	pom	name	Spring HATEOAS	High
Vendor	pom	organization name	Pivotal, Inc.	High
Vendor	pom	organization url	https://www.spring.io	Medium
Vendor	pom	url	spring-projects/spring-hateoas	Highest
Product	file	name	spring-hateoas	High
Product	jar	package name	hateoas	Highest
Product	jar	package name	springframework	Highest
Product	jar	package name	support	Highest
Product	Manifest	automatic-module-name	spring.hateoas	Medium
Product	Manifest	build-jdk-spec	17	Low
Product	Manifest	Implementation-Title	Spring HATEOAS	High
Product	pom	artifactid	spring-hateoas	Highest
Product	pom	developer email	gturnquist(at)vmware.com	Low
Product	pom	developer email	odrotbohm(at)vmware.com	Low
Product	pom	developer id	gturnquist	Low
Product	pom	developer id	odrotbohm	Low
Product	pom	developer name	Greg Turnquist	Low
Product	pom	developer name	Oliver Drotbohm	Low
Product	pom	developer org	VMware, Inc.	Low
Product	pom	groupid	org.springframework.hateoas	Highest
Product	pom	name	Spring HATEOAS	High
Product	pom	organization name	Pivotal, Inc.	Low
Product	pom	organization url	https://www.spring.io	Low
Product	pom	url	spring-projects/spring-hateoas	High
Version	file	version	2.5.1	High
Version	Manifest	Implementation-Version	2.5.1	High
Version	pom	version	2.5.1	Highest

Identifiers

pkg:maven/org.springframework.hateoas/spring-hateoas@2.5.1 (Confidence:High)
cpe:2.3:a:vmware:spring_hateoas:2.5.1:*:*:*:*:*:*:* (Confidence:Highest)

spring-plugin-core-3.0.0.jar

Description:

Core plugin infrastructure

License:

Apache License, Version 2.0: https://www.apache.org/licenses/LICENSE-2.0

File Path: /home/runner/.m2/repository/org/springframework/plugin/spring-plugin-core/3.0.0/spring-plugin-core-3.0.0.jar
MD5: d29a8f831dfe90d150ab694489f2e7c2
SHA1: d56aa02dd7272dca30aa598dc8b72e823227046a
SHA256:edf72d44b9cf1199cc783d620f5f86df82fb378521dac313540086e6c3c66ff0
Referenced In Project/Scope: psi-probe-rest:compile
pkg:maven/org.springframework.hateoas/spring-hateoas@2.5.1

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	spring-plugin-core	High
Vendor	hint analyzer	vendor	pivotal software	Highest
Vendor	hint analyzer	vendor	SpringSource	Highest
Vendor	hint analyzer	vendor	vmware	Highest
Vendor	jar	package name	core	Highest
Vendor	jar	package name	plugin	Highest
Vendor	jar	package name	springframework	Highest
Vendor	Manifest	automatic-module-name	spring.plugin.core	Medium
Vendor	Manifest	build-jdk-spec	17	Low
Vendor	pom	artifactid	spring-plugin-core	Highest
Vendor	pom	artifactid	spring-plugin-core	Low
Vendor	pom	developer email	odrotbohm@vmware.com	Low
Vendor	pom	developer id	drotbohm	Medium
Vendor	pom	developer name	Oliver Drotbohm	Medium
Vendor	pom	developer org	VMware	Medium
Vendor	pom	developer org URL	https://www.spring.io	Medium
Vendor	pom	groupid	org.springframework.plugin	Highest
Vendor	pom	name	Spring Plugin - Core	High
Vendor	pom	organization name	VMware, Inc.	High
Vendor	pom	organization url	https://www.vmware.com	Medium
Vendor	pom	url	spring-projects/spring-plugin/spring-plugin-core	Highest
Product	file	name	spring-plugin-core	High
Product	jar	package name	core	Highest
Product	jar	package name	plugin	Highest
Product	jar	package name	springframework	Highest
Product	Manifest	automatic-module-name	spring.plugin.core	Medium
Product	Manifest	build-jdk-spec	17	Low
Product	Manifest	Implementation-Title	Spring Plugin - Core	High
Product	pom	artifactid	spring-plugin-core	Highest
Product	pom	developer email	odrotbohm@vmware.com	Low
Product	pom	developer id	drotbohm	Low
Product	pom	developer name	Oliver Drotbohm	Low
Product	pom	developer org	VMware	Low
Product	pom	developer org URL	https://www.spring.io	Low
Product	pom	groupid	org.springframework.plugin	Highest
Product	pom	name	Spring Plugin - Core	High
Product	pom	organization name	VMware, Inc.	Low
Product	pom	organization url	https://www.vmware.com	Low
Product	pom	url	spring-projects/spring-plugin/spring-plugin-core	High
Version	file	version	3.0.0	High
Version	Manifest	Implementation-Version	3.0.0	High
Version	pom	version	3.0.0	Highest

Identifiers

pkg:maven/org.springframework.plugin/spring-plugin-core@3.0.0 (Confidence:High)

spring-web-6.2.12.jar

Description:

Spring Web

License:

Apache License, Version 2.0: https://www.apache.org/licenses/LICENSE-2.0

File Path: /home/runner/.m2/repository/org/springframework/spring-web/6.2.12/spring-web-6.2.12.jar
MD5: 2bf493d1c575cb1b7b9cc62555fd010e
SHA1: 58bdd67728631b561a8b9cf4249a0d990bb3ef88
SHA256:caff724ebb7c423696e1d2c7690245fbbafe218695b3a4479faa668af0400e6d
Referenced In Project/Scope: psi-probe-rest:compile
pkg:maven/org.springframework.hateoas/spring-hateoas@2.5.1

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	spring-web	High
Vendor	hint analyzer	vendor	pivotal software	Highest
Vendor	hint analyzer	vendor	SpringSource	Highest
Vendor	hint analyzer	vendor	vmware	Highest
Vendor	jar	package name	springframework	Highest
Vendor	jar	package name	web	Highest
Vendor	Manifest	automatic-module-name	spring.web	Medium
Vendor	pom	artifactid	spring-web	Highest
Vendor	pom	artifactid	spring-web	Low
Vendor	pom	developer email	juergen.hoeller@broadcom.com	Low
Vendor	pom	developer id	jhoeller	Medium
Vendor	pom	developer name	Juergen Hoeller	Medium
Vendor	pom	groupid	org.springframework	Highest
Vendor	pom	name	Spring Web	High
Vendor	pom	organization name	Spring IO	High
Vendor	pom	organization url	https://spring.io/projects/spring-framework	Medium
Vendor	pom	url	spring-projects/spring-framework	Highest
Product	file	name	spring-web	High
Product	hint analyzer	product	springsource_spring_framework	Highest
Product	jar	package name	springframework	Highest
Product	jar	package name	web	Highest
Product	Manifest	automatic-module-name	spring.web	Medium
Product	Manifest	Implementation-Title	spring-web	High
Product	pom	artifactid	spring-web	Highest
Product	pom	developer email	juergen.hoeller@broadcom.com	Low
Product	pom	developer id	jhoeller	Low
Product	pom	developer name	Juergen Hoeller	Low
Product	pom	groupid	org.springframework	Highest
Product	pom	name	Spring Web	High
Product	pom	organization name	Spring IO	Low
Product	pom	organization url	https://spring.io/projects/spring-framework	Low
Product	pom	url	spring-projects/spring-framework	High
Version	file	version	6.2.12	High
Version	Manifest	Implementation-Version	6.2.12	High
Version	pom	version	6.2.12	Highest

Identifiers

pkg:maven/org.springframework/spring-web@6.2.12 (Confidence:High)
cpe:2.3:a:pivotal_software:spring_framework:6.2.12:*:*:*:*:*:*:* (Confidence:Highest)
cpe:2.3:a:springsource:spring_framework:6.2.12:*:*:*:*:*:*:* (Confidence:Highest)
cpe:2.3:a:vmware:spring_framework:6.2.12:*:*:*:*:*:*:* (Confidence:Highest)
cpe:2.3:a:web_project:web:6.2.12:*:*:*:*:*:*:* (Confidence:Highest)

How to read the report | Suppressing false positives | Getting Help: github issues

Project: psi-probe-rest

com.github.psi-probe:psi-probe-rest:5.3.1-SNAPSHOT

Summary

Dependencies (vulnerable)

accessors-smart-2.6.0.jar

Evidence

Identifiers

angus-activation-2.0.3.jar

Evidence

Identifiers

asm-9.7.1.jar

Evidence

Identifiers

commons-logging-1.3.5.jar

Evidence

Identifiers

error_prone_annotations-2.42.0.jar

Evidence

Identifiers

j2objc-annotations-3.1.jar

Evidence

Identifiers

jakarta.activation-api-2.1.4.jar

Evidence

Identifiers

json-path-2.9.0.jar

Evidence

Identifiers

json-smart-2.6.0.jar

Evidence

Identifiers

jsr305-3.0.2.jar

Evidence

Identifiers

micrometer-commons-1.14.12.jar

Evidence

Identifiers

micrometer-observation-1.14.12.jar

Evidence

Identifiers

slf4j-api-2.0.17.jar

Evidence

Identifiers

spotbugs-annotations-4.9.8.jar

Evidence

Identifiers

spring-core-6.2.12.jar

Evidence

Related Dependencies

Identifiers

spring-hateoas-2.5.1.jar

Evidence

Identifiers

spring-plugin-core-3.0.0.jar

Evidence

Identifiers

spring-web-6.2.12.jar

Evidence

Identifiers